Privacy Policy

Who we are

Our website address is: https://sattvamart.com. Sattva Mart is an online retailer of authentic Indian food products, selling exclusively to customers in the United Kingdom. We are the Data Controller for all personal data collected through this website and are registered with the Information Commissioner’s Office (ICO) under registration number [YOUR ICO NUMBER]. You can verify this at ico.org.uk. If you have any questions about how we handle your data, contact us at hello@sattvamart.com.

Comments

When visitors leave comments on the site we collect the data shown in the comments form — including your name, email address, and the content of your comment — and also the visitor’s IP address and browser user agent string to help spam detection and to protect the integrity of our website.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment. All comments are held for moderation before appearing publicly. The lawful basis for processing comment data is our Legitimate Interests under UK GDPR Article 6(1)(f) — to maintain the quality and security of our website and protect against spam.

Media

If you upload images to the website — for example as part of a product review — you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website. We recommend stripping EXIF data from your photos before uploading. By uploading an image, you confirm you have the right to share it and that it does not infringe anyone else’s copyright or privacy. We do not use uploaded images for any marketing or profiling purposes.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Our WooCommerce store also sets the following strictly necessary cookies which cannot be disabled, as they are essential for the shop to function: woocommerce_cart_hash and woocommerce_items_in_cart track your basket contents and last for the duration of your session; wp_woocommerce_session_* stores your customer session data and lasts for 2 days. These cookies contain no payment or card data. We also use anonymised analytics cookies (Google Analytics) to understand how visitors use our site — these do not identify you personally and do not require explicit consent under the Data (Use and Access) Act 2025. Any marketing cookies (e.g. Facebook Pixel) require your explicit opt-in consent and can be managed via the Cookie Settings link in our website footer.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. We have no control over those external websites’ data practices and recommend reviewing their privacy policies directly.

Who we share your data with

We do not sell, rent, or trade your personal data. If you request a password reset, your IP address will be included in the reset email as a security measure. We share your data only with the following trusted service providers who help us operate our store: payment processors (Stripe / PayPal) to securely handle transactions; delivery partners (Royal Mail / DPD / Evri) to fulfil and track your orders; our website hosting provider to operate this WordPress / WooCommerce site; our email marketing platform (e.g. Mailchimp) only if you have opted in to our newsletter; and Google Analytics for anonymised website usage statistics. We may also share data with HMRC, the ICO, or other legal authorities where required by UK law. All third-party processors are contractually bound to handle your data securely and only on our instructions.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. You may request deletion of your comment at any time by contacting hello@sattvamart.com.

For users that register on our website (if any), we also store the personal information they provide in their user profile for the duration of the account plus 2 years after last activity. All users can see, edit, or delete their personal information at any time via the “My Account” page (except they cannot change their username). Website administrators can also see and edit that information. Order records are retained for 7 years to comply with HMRC tax and accounting requirements, even after an account is closed. Email marketing preferences are retained until you unsubscribe, plus 12 months. Customer service correspondence is retained for 3 years.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes (such as order records required by HMRC). Under UK GDPR you also have the right to rectify inaccurate data, restrict or object to processing, and withdraw any consent you have given at any time. To exercise any of these rights, email hello@sattvamart.com with the subject line “Data Subject Request” — we will respond within one calendar month, free of charge.

Where your data is sent

Visitor comments may be checked through an automated spam detection service (Akismet, provided by Automattic). Comment data — including the commenter’s IP address, email hash, and browser user agent — is transmitted to Akismet’s servers for spam analysis. Akismet’s privacy policy is available at: https://automattic.com/privacy/. Some of our other service providers are also based outside the United Kingdom — including Google (USA), Stripe (USA), and Mailchimp (USA). Where your data is transferred internationally, we ensure appropriate safeguards are in place including UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs), in compliance with UK GDPR. All data transmissions are protected by SSL/TLS encryption (HTTPS). If you have concerns about any international transfers, contact us at hello@sattvamart.com.

Sattva Mart Privacy Policy · Version 1.0 · Effective February 2026 · Next review February 2027 · Compliant with UK GDPR, Data Protection Act 2018, PECR, and Data (Use and Access) Act 2025.